信息网络安全 ›› 2015, Vol. 15 ›› Issue (8): 14-19.doi: 10.3969/j.issn.1671-1122.2015.08.003

• • 上一篇    下一篇

SM4密码算法的频域能量分析攻击

王敏1,2, 饶金涛2, 吴震2(), 杜之波2   

  1. 1.四川大学电子信息学院,四川成都 610061
    2.成都信息工程大学信息安全工程学院,四川成都 610225
  • 收稿日期:2015-07-20 出版日期:2015-08-01 发布日期:2015-08-21
  • 作者简介:

    王敏(1977-),女,四川,讲师,博士研究生,主要研究方向:网络攻防、侧信道攻击与防御;饶金涛(1985-),男,湖北,助教,硕士,主要研究方向:信息安全、嵌入式系统安全、侧信道攻击与防御;吴震(1975-),男,江苏,副教授,硕士,主要研究方向:信息安全、密码学、侧信道攻击与防御、信息安全设备设计与检测;杜之波(1982-),男,山东,讲师,硕士,主要研究方向:信息安全、侧信道攻击与防御、天线应用和物联网安全。

  • 基金资助:
    国家重大科技专项[2014ZX01032401-001];国家高技术研究发展计划(863计划)[2012AA01A403];“十二五”国家密码发展基金[MMJJ201101022];四川省科技支撑计划[2014GZ0148];四川省教育厅重点科研基金[13ZA0091];成都信息工程大学科研基金 [CRF201301]

Power Analysis Attack against SM4 in Frequency Domain

Min WANG1,2, Jin-tao RAO2, Zhen WU2(), Zhi-bo DU2   

  1. 1.College of Electronic Information, Sichuan University, Chengdu Sichuan 610061, China
    2. College of Information Security Engineering, Chengdu University of Information Technology, Chengdu Sichuan 610225, China
  • Received:2015-07-20 Online:2015-08-01 Published:2015-08-21

摘要:

SM4算法是我国第一个公开的商用密码分组算法,自算法公布以来,国内外学者对其进行了一系列的包括侧信道攻击在内的密码分析攻击研究。目前文献研究的侧信道能量攻击主要是通过对携带敏感信息的能量信号进行时域上的分析从而恢复出密钥。但纯时域信号的分析处理有其局限性,如时域上能量信号的对齐处理就是能量分析攻击的关键因素之一,其处理结果的好坏将直接影响到侧信道攻击的成功率。为了消除能量侧信道泄露信号的时域对齐对能量分析攻击影响,文章提出了频域上的能量分析攻击。在频域上分析攻击不仅可行,还可利用其特性来消除时域上信号未对齐而对能量分析攻击成功率的影响。文章以在FPGA上硬实现的SM4算法为例,在时域、频域均无对齐处理的方式下,成功实现了对SM4密码算法的频域能量分析攻击,验证了频域上能量分析攻击的可行性。

关键词: SM4算法, 能量分析攻击, 频域, 信号对齐

Abstract:

SM4 algorithm is the first open promulgated Chinese commercial block cipher algorithm. Since the algorithm is promulgated, some study on cryptanalysis of SM4 algorithm including side channel attack(SCA) by domestic and foreign scholars have been done. Recent literature study on SCA aremanily focus on power attack in time domain to compromise the secret password. But pure signal analysis in time domain has limitation. For instance, the alignment quality of power signal in time domain is the key factor to in fluence power analysis attack. In order to eliminate the effect of the signal alignment on the power analysis attack, the method of the power analysis attack against in frequency domain is proposed. The power analysis attack in frequency domain is not only feasible, but also can elimi nate the effect of the signal alignment. Finally, the method in this paper is successfully im plemented on the SM4 cryptographic in FPGA, in the case of no alignment operation in the frequency domain. The experimental results show that the proposed attack method is effec tive.

Key words: SM4 algorithm, power analysis attack, frequency domain, signal alignment

中图分类号: